• info
• discussion
• exploit
• solution
• references

Cryptocat CVE-2013-4103 Arbitrary Script Injection Vulnerability

Cryptocat is prone to an arbitrary script-injection vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this issue to execute arbitrary script code within the context of the application.

Versions prior to Cryptocat 2.0.22 are vulnerable.